Ignore confirmation on use and timeout settings when ssh key added to Windows OpenSSH

[xdarkfirestorm]

Expected Behavior

SSH key is added to agent

Current Behavior

SSH key is not added to agent

Possible Solution

Uncheck require user confirmation when this key is used

Steps to Reproduce

1. Enable OpenSSH Client for Windows 10
2. Enable SSH Agent for Keepass database
3. Check use OpenSSH for Windows instead of Pageant
4. Add entry for key file
   4.1 Add a private key file (i used an ecdsa key)
   4.2 Enable key adding to agent when database is opened/unlocked
   4.3. Enable key remove from agent when database is closed/locked
   4.4 Enable require user confirmation when this key is used

Context

I switched from Linux to Windows and was very happy to see that there is also Windows support for ssh agent. When i find out it was not working I had to add it myself via shell.

Debug Info

KeePassXC - Version 2.5.3
Revision: f8c962b

Qt 5.13.2
Debugging mode is disabled.

Operating system: Windows 10 (10.0)
CPU architecture: x86_64
Kernel: winnt 10.0.18363

Enabled extensions:

• Auto-Type
• Browser Integration
• SSH Agent
• KeeShare (signed and unsigned sharing)
• YubiKey

Cryptographic libraries:
libgcrypt 1.8.5

[droidmonkey]

So does the error only occur when you require user confirmation?

[xdarkfirestorm]

Yes

[hifi]

Looks like an upstream issue to me: PowerShell/Win32-OpenSSH#1056

Does it actually work with -c from command line and prompt you before use if you do that outside KeePassXC?

[xdarkfirestorm]

Tomorrow i'll try

[hifi]

Any update on this?

[vvvlc]

I have same problem here is output

PS C:\Users\vv632728\.ssh> ssh-add.exe -c .\id_rsa_
Could not add identity ".\id_rsa_": communication with agent failed

PS C:\Users\vv632728\.ssh> ssh-add.exe  .\id_rsa_
Identity added: .\id_rsa_ (.\id_rsa_)                        

Likely an issue on MS side.

When I uncheck Enable require user confirmation when this key is used then KeypassXC loads key correctly.

[hifi]

Closing this as upstream issue, thanks @vvvlc for testing it.